$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa File: 400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa (raw, json) Hash identifier: NNn88NJx3OLAvcp0+yuYMYjSubbWduOpx4iIhVJnk3Q= Subject key identifier: 1E:89:94:F5:37:13:68:90:04:F0:54:77:EB:95:6E:1E:D9:E4:DD:C5 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584D00B27743BF07ACCB61B3CA00 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 63240 IP address blocks: 192.254.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:77:43:bf:07:ac:cb:61:b3:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=2dd28acc-6c2a-4b3a-90f4-e6c7b4bcaf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:ab:e2:98:11:92:a4:81:4c:09:02:c1:70: 03:0e:13:2f:7e:a9:1a:8c:5d:9f:9a:08:1e:18:d2: e2:d6:8e:27:8a:ea:96:cb:cb:8f:88:82:02:e4:8b: db:71:65:77:b9:01:f8:b0:e0:b7:12:80:28:cf:3c: c6:55:55:98:c0:b9:2a:c0:2e:f3:6a:91:26:d0:c2: 0e:db:5c:57:ba:a6:fa:02:c0:9d:36:29:41:11:a3: 4f:7e:da:cd:ce:8e:1d:99:59:94:a6:d5:c1:59:72: e6:7d:f3:8f:65:a1:6d:f0:df:2d:b7:cc:bd:35:a2: 88:9f:95:16:28:a9:2b:58:62:60:3b:4c:3a:9b:72: 22:9d:65:78:3a:ee:b3:3a:23:8c:6d:8a:55:7f:0d: 03:da:54:36:11:2d:6a:d3:f5:4d:01:2c:3c:f8:cc: f5:25:c2:29:81:8c:9a:c6:b3:6b:ab:b3:a3:72:44: 40:f8:6e:74:5c:d5:c6:0e:ba:b6:53:0d:06:5e:1a: 23:3a:be:99:35:33:93:54:c5:b8:36:b5:29:ea:df: 0a:62:c4:f3:92:4c:4c:3d:e6:20:ab:a0:ea:2a:0e: a7:19:08:cb:b7:a7:be:c5:fa:e9:bb:56:6f:90:53: 50:3e:a9:12:f2:48:62:5c:b6:f3:04:74:aa:88:c9: 6e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:89:94:F5:37:13:68:90:04:F0:54:77:EB:95:6E:1E:D9:E4:DD:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 192.254.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ac:8b:e6:66:54:e7:f1:52:08:00:57:eb:93:08:6d:ac:d6: 87:70:11:27:1d:1a:b4:93:6a:8f:77:cb:12:53:7d:a3:20:6a: ab:b7:3d:22:e6:30:a0:41:d7:c5:e9:da:30:b3:14:af:7d:77: 59:8d:09:1a:7c:ab:73:41:a4:7c:d2:60:ec:9d:57:02:a8:03: fd:ee:be:77:b4:0f:2d:c4:64:c2:a0:4c:42:0c:2c:de:f1:ed: 9b:00:45:09:20:99:e2:bd:e7:e2:f6:36:51:90:32:7e:f1:5c: 7d:31:48:6c:43:1d:30:f2:aa:70:96:12:8b:8f:d1:48:62:32: 24:f3:34:6d:b9:81:db:ef:78:ac:6c:ca:26:48:41:95:74:36: 5a:78:f8:30:65:b6:ae:85:8b:85:9c:c3:08:5f:1f:f4:39:da: 0b:78:a1:93:cf:da:f4:83:a3:d9:d0:6d:8c:59:43:57:c9:69: 19:82:dc:dc:0b:9b:9f:d3:06:dc:30:50:79:03:e3:41:43:05: 0a:be:26:8a:de:cc:74:2e:c3:11:12:c4:bc:f1:a5:2c:a7:c9: 50:a4:7e:9d:1f:86:d9:6c:5c:83:47:fe:11:2a:4e:da:8d:7e: b3:66:fd:05:dd:23:98:9f:ee:01:ff:b3:6b:4b:1e:d8:2d:81: 07:9a:64:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsndDvwesy2GzygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MmRkMjhhY2MtNmMyYS00YjNhLTkwZjQtZTZjN2I0YmNhZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorir4pgRkqSBTAkCwXADDhMvfqkajF2fmgge GNLi1o4niuqWy8uPiIIC5IvbcWV3uQH4sOC3EoAozzzGVVWYwLkqwC7zapEm0MIO 21xXuqb6AsCdNilBEaNPftrNzo4dmVmUptXBWXLmffOPZaFt8N8tt8y9NaKIn5UW KKkrWGJgO0w6m3IinWV4Ou6zOiOMbYpVfw0D2lQ2ES1q0/VNASw8+Mz1JcIpgYya xrNrq7OjckRA+G50XNXGDrq2Uw0GXhojOr6ZNTOTVMW4NrUp6t8KYsTzkkxMPeYg q6DqKg6nGQjLt6e+xfrpu1ZvkFNQPqkS8khiXLbzBHSqiMluiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6JlPU3E2iQBPBUd+uVbh7Z5N3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNDAwZGZmOTQtYThkMC0z ZGIyLWJiZGMtMGY1YjI5NzAxNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP5tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABesi+ZmVOfxUggAV+uTCG2s1odwEScdGrSTao93yxJTfaMgaqu3PSLm MKBB18Xp2jCzFK99d1mNCRp8q3NBpHzSYOydVwKoA/3uvne0Dy3EZMKgTEIMLN7x 7ZsARQkgmeK95+L2NlGQMn7xXH0xSGxDHTDyqnCWEouP0UhiMiTzNG25gdvveKxs yiZIQZV0Nlp4+DBltq6Fi4WcwwhfH/Q52gt4oZPP2vSDo9nQbYxZQ1fJaRmC3NwL m5/TBtwwUHkD40FDBQq+JorezHQuwxESxLzxpSynyVCkfp0fhtlsXINH/hEqTtqN frNm/QXdI5if7gH/s2tLHtgtgQeaZI4= -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:40 2026 by rpki-client